This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
File:                     pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json)
Hash identifier:          +IME2LBRx6TAMxJaQyS+c6RYm/Sg2+o6zGczUUBLSJc=
Subject key identifier:   CD:C8:CE:ED:96:11:B1:EB:25:4F:18:A9:2D:35:BD:BF:D8:2E:F4:33
Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
Certificate issuer:       /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Certificate serial:       044B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
Manifest number:          0443
Signing time:             Mon 22 Dec 2025 23:20:00 +0000
Manifest this update:     Mon 22 Dec 2025 23:20:00 +0000
Manifest next update:     Mon 29 Dec 2025 23:20:00 +0000
Files and hashes:         1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: 3CzOjUmOsEgxlkmmjtCND136VXDZ5tx1C8yd3DnINBs=)
                          2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: 2pNsdUTXJ21ZMGMJibEjsxpDH0Z9Fw35noblZo6xKpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
                          rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
        Validity
            Not Before: Dec 22 23:20:00 2025 GMT
            Not After : Dec 29 23:20:00 2025 GMT
        Subject: CN=6949d220-07b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:07:5e:b0:e7:21:7d:54:42:da:8e:4a:aa:
                    0c:7c:a0:89:39:94:89:9e:e5:d2:df:1d:2e:96:9d:
                    5b:1b:46:88:92:fb:87:81:f5:95:9a:13:eb:9c:8e:
                    fb:37:af:8a:14:fb:2c:4b:18:c5:5d:39:36:f9:eb:
                    ca:1e:62:69:62:fb:2f:58:ce:76:da:e5:9e:b3:e4:
                    69:f2:7b:df:cc:7d:d4:04:4f:33:f6:93:40:75:25:
                    92:e8:47:d7:0d:32:99:af:37:43:66:91:d8:7c:09:
                    45:e8:93:71:04:9b:50:6a:f9:89:b9:96:06:36:78:
                    fe:f8:19:fc:fb:60:8f:99:9b:5c:2b:79:37:93:f0:
                    d3:1e:38:c9:14:ba:6e:6e:f6:e8:4f:ce:2d:54:28:
                    64:51:5a:5e:76:06:62:e9:b1:25:fc:05:50:a8:bf:
                    07:41:5d:d9:2b:50:44:95:4c:49:94:6b:8a:e7:f4:
                    0c:52:95:c2:ca:e1:a8:4a:9b:33:f0:9d:35:70:92:
                    ee:8e:ba:14:1b:45:33:51:61:bc:2f:55:9e:fc:a4:
                    30:7a:25:14:3f:46:b5:81:22:a3:af:f4:18:d8:fc:
                    cc:7d:a6:71:c7:3a:d6:0f:c4:3f:b4:3c:a9:09:71:
                    79:b4:fb:40:1c:c6:8e:e5:8f:c7:ed:3b:a8:25:75:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C8:CE:ED:96:11:B1:EB:25:4F:18:A9:2D:35:BD:BF:D8:2E:F4:33
            X509v3 Authority Key Identifier:
                keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:76:86:9d:6a:a5:39:ec:a3:a5:1c:7d:45:b7:46:07:52:be:
         41:46:58:4d:74:8f:ef:f8:08:05:ac:23:72:ca:17:59:5b:c4:
         11:e5:7e:52:10:1b:f5:81:47:11:e9:5a:0c:66:c8:1b:be:39:
         1d:70:84:44:29:35:4c:ad:b9:9b:c4:ff:f7:53:5c:b4:74:4c:
         5a:6c:e7:a5:cf:fb:92:97:2f:cd:3e:6d:84:9e:7d:b6:77:99:
         5c:eb:5c:8a:43:cb:b6:52:94:4f:33:87:d3:87:8b:49:e4:2d:
         a2:79:e6:da:07:9f:67:20:4a:01:96:a4:32:09:1d:4e:ed:fd:
         ac:ad:51:76:b6:50:36:85:31:eb:ec:19:a1:f0:9a:d5:a3:20:
         ef:18:4f:76:c6:78:e0:18:6b:b0:8c:00:9d:6f:f2:f6:ee:9c:
         7c:3f:91:fb:30:56:0f:d5:ed:e4:b2:ad:e2:5a:d9:cf:aa:06:
         4f:92:99:cc:a5:cf:6f:9b:03:75:ed:9d:fa:db:da:12:4b:d5:
         ba:7f:d1:ff:df:4b:c7:ee:ee:21:07:a5:ec:5d:c0:b5:1d:c1:
         fb:17:f9:fc:08:50:94:f6:47:47:43:e2:16:2e:b4:1b:3a:2f:
         86:3f:46:8f:a2:2a:ff:d7:79:45:e0:a6:de:30:09:55:75:22:
         a4:3e:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:04 2025 by rpki-client